Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account and setting up child profiles:

• Account information — your name and email address, provided during sign-up via our authentication provider.
• Child profile data — your child's first name, age, interests, companions (e.g. pets or toys), things to avoid in stories, favorite color, and preferred story delivery time. This information is entered by you, the parent or guardian.
• Story preferences — world and tone settings that shape the flavor of each story.
• Payment information — billing details collected and processed by Stripe. We do not store your card number or payment credentials on our servers.
• Usage data — basic logs such as story delivery timestamps and account activity, used to operate and improve the service.

2. How We Use Your Information

• To generate a personalized bedtime story for your child each night, using the profile information you have provided.
• To deliver that story to your email address at the time you have chosen.
• To manage your account, subscription, and billing.
• To send transactional emails such as welcome messages and payment receipts. We do not send marketing emails without your consent.
• To diagnose issues and improve the quality of our service.

We do not sell your personal information or your child's data to third parties, and we do not use it for advertising purposes.

3. Artificial Intelligence

Each bedtime story is generated using an AI language model. To create a story, we send relevant details from your child's profile — such as their name, age, interests, and companions — to the AI system as part of a story prompt. No sensitive personal identifiers (such as full legal names or contact details) are included in these prompts beyond what you have chosen to enter.

The AI model is provided by Anthropic (see Third-Party Services below). Stories generated by the model are stored on our servers and delivered to you by email. We do not use your child's profile data to train AI models.

4. Data Retention

We retain your account and child profile data for as long as your account is active or as needed to provide the service. You may request deletion of your account and all associated data at any time by contacting us.

Generated stories are stored to allow for future reference and to ensure delivery. Story content and profile information are stored securely and access is restricted to authorized systems and personnel.

5. Third-Party Services

We work with the following trusted third-party providers to operate Once Upon a Moonbeam:

• Clerk — handles account creation, sign-in, and authentication. Your email address and account credentials are managed by Clerk.
• Stripe — processes subscription payments. Payment card details are handled directly by Stripe and are never transmitted to or stored on our servers.
• Resend — delivers story emails and transactional messages to your inbox.
• Anthropic — provides the AI model used to generate each night's story. Story prompts — derived from your child's profile — are sent to Anthropic's API. Anthropic's use of this data is governed by their API data usage policies.
• Neon / PostgreSQL — our database provider, used to store account, profile, and story data securely.
• Google Analytics — we use Google Analytics to help us understand how visitors use our site. This tool collects anonymized usage data (such as pages visited and general location) and does not identify individual visitors personally.

Each of these providers is bound by their own privacy policies and applicable data protection laws.

6. Children's Privacy

Once Upon a Moonbeam is a service for parents and guardians, not for children directly. Children do not create accounts, sign in, or interact with our platform. All profile information about a child is entered by a parent or guardian who has agreed to our Terms of Service.

We are committed to compliance with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under the age of 13. The child profile data we collect (such as a child's first name and interests) is provided to us by the parent or guardian, and is used solely to personalize the bedtime stories delivered to that parent or guardian's email address.

If you believe that a child has provided us with personal information without parental consent, please contact us immediately at the address below and we will take steps to remove that information.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete the personal information we hold about you and your child. You may also have the right to object to or restrict certain processing.

To exercise any of these rights, please contact us at the address below. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Contact

If you have questions about this Privacy Policy or how we handle your data, please reach out:

This policy may be updated from time to time. We will notify you of material changes by email or by posting a notice on the dashboard. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.